DFIR Lab is an independent research platform for digital forensics, incident response, and threat intelligence — built by practitioners, for practitioners. Here's what you'll find.
Learn how to analyze phishing emails like a SOC analyst: trace delivery paths, verify SPF/DKIM/DMARC, detect spoofing, and automate header analysis.
Learn how an exposure scanner API aggregates 11 intelligence providers—Shodan, SecurityTrails, Criminal IP, and more—into a single API call with a 0–100 risk score. See how DFIR Lab's attack surface management tool compares in cost and capability.
A practical walkthrough of digital forensics investigation steps for SOC analysts — covering detection, containment, eradication, recovery, and reporting based on the NIST SP 800-61 framework.